A reading list for infosec engineers
Switch branches/tags
Nothing to show
Clone or download
Latest commit 166d74a Apr 27, 2018
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
CONTRIBUTING.md Update CONTRIBUTING.md Apr 20, 2016
README.md That one deserves a star Apr 26, 2018

README.md

InfoSec Engineering Reading List

A reading list for InfoSec engineers.

This is my list, not a definitive one; that is, these are resources I've found useful. As such it has some baises:

  • It's oriented towards providers of Software-, Platform-, and Infrastructure-as-a-Service.
  • It tends to focus on the human factors aspects of security practice (there's deeply technical stuff too, just not as much).
  • There's some random stuff that's not explicitly "about infosec", but that I've nonetheless found extremely useful in thinking about infosec. Dekker's Field Guide to Understanding 'Human Error' is a good example of this kind of resource.

Stars ⭐️ indicate especially good "starting point" resources - things to read first as an introduction to the topic.

Suggestions are welcome!

[This list is inspired by Mark McGranaghan's Services Engineering Reading List, which super-great. Thanks for the list, and the inspiration, Mark!]

Books

Blog posts

Papers

Video